Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Web-ofisi Clear all filters
TI-2018-15435 CVE-2018-25210 · GHSA-wqv3-mqhr-hx3m

WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

Priority HIGH 77

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00276 Published 2026-03-26 No fix listed CWE-79
TI-2019-15515 CVE-2019-25462 · GHSA-46jj-7w5w-vccv

Web Ofisi Rent a Car v3 SQL Injection via klima Parameter

Priority HIGH 77

Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00304 Published 2026-02-22 No fix listed CWE-89
TI-2019-15514 CVE-2019-25461 · GHSA-982r-pxpw-xv2x

Web Ofisi Platinum E-Ticaret v5 SQL Injection via ajax/productsFilterSearch

Priority HIGH 77

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00422 Published 2026-02-22 No fix listed CWE-89
TI-2019-15513 CVE-2019-25460 · GHSA-jfw2-q9rx-mg64

Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter

Priority HIGH 77

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00422 Published 2026-02-22 No fix listed CWE-89
TI-2019-15512 CVE-2019-25459 · GHSA-w7wm-w9qw-pc72

Web Ofisi Emlak V2 SQL Injection via emlak-ara.html

Priority HIGH 79

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00503 Published 2026-02-22 No fix listed CWE-89
TI-2019-15511 CVE-2019-25458 · GHSA-q2p9-fpj7-9fjp

Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html

Priority HIGH 79

Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00556 Published 2026-02-22 No fix listed CWE-89
TI-2019-15510 CVE-2019-25457 · GHSA-qx92-pw43-vf25

Web Ofisi Firma v13 SQL Injection via oz Parameter

Priority HIGH 77

Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-02-22 No fix listed CWE-89
TI-2019-15509 CVE-2019-25456 · GHSA-wf2x-4p8v-p7m6

Web Ofisi Emlak v2 SQL Injection via ara Parameter

Priority HIGH 77

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00539 Published 2026-02-22 No fix listed CWE-89
TI-2019-15508 CVE-2019-25455 · GHSA-22mj-mcf8-h63q

Web Ofisi E-Ticaret v3 SQL Injection via ara.html

Priority HIGH 77

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-02-22 No fix listed CWE-89